Location
ESOC, Darmstadt, Germany
Description
You will report to the Head of the Ground Segment System and Cybersecurity Engineering Section (OPS-GAE) of the System and Applications Engineering Division, in the Ground Systems Engineering and Innovation Department of the Directorate of Operations.
Under the direct authority of the Head of Section, you will be responsible for supporting ESA programmes by architecting end-to-end ground segment cyber security engineering solutions for operations and in support of the overall ESA matrix organisation. You will also be responsible for managing security engineering activities in support of the Directorate's cyber security strategy, technology development roadmap, and standardisation activities.
Duties
Your tasks and responsibilities will include:
* coordinating the execution of ground segment security risk assessments in support to the system owner, identify threats and vulnerabilities, and contributing to the definition of related security requirements;
* incorporating inputs (security architecture, security requirements, etc.) from system level, defining ground segment system security architectures, including ground segment security monitoring and interfaces with external entities, ensuring the identification and implementation of security controls in response to unacceptable risks at system level, and implementing the end-to-end ground segment security engineering lifecycle;
* ensuring that identified ground segment security risks, vulnerabilities and security controls are provided for consolidation at system level;
* supporting the directorates responsible for the programmes in the tendering process and in the supervision of the industrial contracts for the ground system, ensuring deliverables meet the levels of compliance agreed in the industrial contracts by participating in the evaluation of proposals, technical reviews, acceptance milestones and status progress meetings with industry;
* participating in system reviews and acceptance milestones to ensure system security needs are fulfilled;
* assisting in Non-Conformance and Technical Change Boards, providing expert advice on ground segment security implications and solutions;
* analysing ground segment security-related requests for deviations or waivers and recommending actions;
* supporting the oversight function of ground segment system security verification and validation activities in line with applicable assurance requirements and the agreed levels of compliance;
* proposing improvements for the system information security management process in line with the applicable security governance;
* defining the applicable security operations procedures and ensuring compliance;
* contribute to the definition of the ground segment system security technology roadmap, identifying necessary technology developments, and ensuring their execution through an appropriate funding scheme;
* contributing to the definition of security and security engineering standards;
* executing specific cyber security functions, such as the Project Security Officer role, defined in the ESA Security Directives as needed;
* managing engineering of applications, systems and services in collaboration with stakeholders;
* coordination with other units within the Agency;
* definition and acquisition of innovation, research or development activities in the area of Systems and Applications.
Technical competencies
Experience in architecting and managing cybersecurity engineering aspects for large and complex system and software engineering projects throughout the project life cycle
Experience in cybersecurity risk assessment and treatment
Exposure to preparing and supporting system cybersecurity certification in coordination with certification authorities
Skills in engineering project planning, management, and execution as well as management of industrial contracts
Track record of customer relationship development and management
Experience in implementing and driving R&D and/or industrial activities
Exposure to standardisation activities
Behavioural competencies
Result Orientation
Operational Efficiency
Fostering Cooperation
Relationship Management
Continuous Improvement
Forward Thinking
For more information, please refer to ESA Core Behavioural Competencies guidebook
Education
A master's degree in a relevant domain is required for this post.
Additional requirements
Background or experience in:
* project management;
* procurement of industrial services;
* working within complex inter-organisational projects;
* system and software engineering methodologies and tools;
* state-of-the-art cyber security technologies.
Knowledge of ESA technology programmes and existing space communication and security standards is considered an asset.
Diversity, Equity and Inclusiveness
ESA is an equal opportunity employer, committed to achieving diversity within the workforce and creating an inclusive working environment. We therefore welcome applications from all qualified candidates irrespective of gender, sexual orientation, ethnicity, beliefs, age, disability or other characteristics. Applications from women are encouraged.
At the Agency we value diversity, and we welcome people with disabilities. Whenever possible, we seek to accommodate individuals with disabilities by providing the necessary support at the workplace. The Human Resources Department can also provide assistance during the recruitment process. If you would like to discuss this further, please contact us via email at contact.human.resources@esa.int.
Important Information and Disclaimer
In principle, recruitment will be within the advertised grade band (A2-A4). However, if the selected candidate has less than four years of relevant professional experience following the completion of the master’s degree, the position may be filled at A1 level.
Applicants must be eligible to access information, technology, and hardware which is subject to European or US export control and sanctions regulations & eligible to acquire the security clearance by their national security administrations.
During the recruitment process, the Agency may request applicants to undergo selection tests. Additionally, successful candidates will need to undergo basic screening before appointment, which will be conducted by an external background screening service, in compliance with the European Space Agency's security procedures.
Note that ESA is in the process of transitioning to a Matrix setup, which could lead to organisational changes affecting this position.
The information published on ESA’s careers website regarding working conditions is correct at the time of publication. It is not intended to be exhaustive and may not address all questions you would have.
Nationality and Languages
Please note that applications are only considered from nationals of one of the following States: Austria, Belgium, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovenia, Spain, Sweden, Switzerland, the United Kingdom and Canada, Latvia, Lithuania and Slovakia.
According to the ESA Convention, the recruitment of staff must take into account an adequate distribution of posts among nationals of the ESA Member States*. When short-listing for an interview, priority will first be given to internal candidates and secondly to external candidates from under-represented Member States *.
The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another Member State language would be an asset.
*Member States, Associate Members or Cooperating States.